diff --git a/infrastructure/src/main/java/com/callv2/drive/infrastructure/configuration/security/SecurityConfig.java b/infrastructure/src/main/java/com/callv2/drive/infrastructure/configuration/security/SecurityConfig.java index b12ca7be..97a84cd5 100644 --- a/infrastructure/src/main/java/com/callv2/drive/infrastructure/configuration/security/SecurityConfig.java +++ b/infrastructure/src/main/java/com/callv2/drive/infrastructure/configuration/security/SecurityConfig.java @@ -33,6 +33,10 @@ SecurityFilterChain securityFilterChain( .csrf(csrf -> csrf.disable()) .authorizeHttpRequests(authorize -> { authorize + + .requestMatchers(HttpMethod.OPTIONS) + .permitAll() + .requestMatchers("admin/**") .hasAnyRole(ROLE_ADMIN) @@ -48,9 +52,7 @@ SecurityFilterChain securityFilterChain( }) .oauth2ResourceServer(oauth2ResourceServer -> oauth2ResourceServer .jwt(jwt -> jwt.jwtAuthenticationConverter(new KeycloakJwtConverter()))) - .sessionManagement(session -> { - session.sessionCreationPolicy(SessionCreationPolicy.STATELESS); - }) + .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS)) .build(); }